Microsoft Data Protection Notice
Last Updated: January 19, 2015
Notice to Data Subjects
Any Microsoft employee or external resource information collected on this system will be used by Microsoft Corporation and its affiliates and subsidiaries (”Microsoft”) for the purpose of administering and carrying out the employment or personnel relationship. Subject to applicable law, Microsoft may also collect and process data on this site, service, or application to improve and personalize your experience with Microsoft’s products and services. This data may include identifiable and non-identifiable data about the use and performance of the site, service or application that tells us how you interact with it, and may be analyzed to help Microsoft operate and improve the performance of Microsoft products and services.
Personal information collected through Microsoft sites, services and apps may be stored and processed in the United States or any other country where Microsoft or its affiliates, subsidiaries or service providers maintain facilities. Microsoft abides by the U.S.-EU Safe Harbor Framework, and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Economic Area, and Switzerland. To learn more about the Safe Harbor program, and to view our certification, please visit www.export.gov/safeharbor/.
Microsoft takes reasonable steps to ensure that Personal Employment Data is kept up-to-date and is accurate and relevant to the purposes for which it was collected, including providing reasonable opportunities, and/or methods for employees to access their Personal Employment Data, as required by law. For more information on how to access your data, please review Microsoft’s Employee Data Protection Standards, available at http://privacy/Pages/Home/EDPS.
We may share your personal information with your consent. We may also share or disclose personal information with other Microsoft controlled subsidiaries and affiliates, and with vendors or agents working on our behalf. In such cases, these companies must abide by our data privacy requirements and are not allowed to use the information for any other purpose. Microsoft may also access or disclose personal information when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of our services; and to protect the rights or property of Microsoft.
Notice Regarding Security Requirements
Personal information on this system may be accessed and used only for the purposes described in this Notice. Personal information includes any information that permits an individual to be identified or contacted (such as name, alias, postal address, e-mail address, personnel number, or government issued ID numbers). Any person who uses, transfers or stores personal information must ensure that information is securely protected in accordance with the Information Classification & Handling Standard and handled in accordance with (i) any additional notices posted on this site or tool, (ii) all applicable agreements (e.g., an HR Confidentiality Agreement signed by Human Resources Employees, or the data protection language and confidentiality provisions in the Resource Access or Email/Cardkey Agreement signed by external resources), and (iii) any other applicable corporate policies, standards and guidelines.
Information regarding corporate privacy and security policies, standards and guidelines may be found on the Microsoft Privacy portal. If you have questions about the data handling processes of this system, please contact your privacy manager through http://privacy/inquiry.aspx. If you wish to report a possible privacy violation, please report it at http://privacy/incident.aspx. If you are unable to access the privacy incident submission page, please report incidents through firstname.lastname@example.org.